This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: Nwhghl78Ix+SrcjaOp/XlKLfcRJQRm/JFJ2QrtBxHDQ= Subject key identifier: 66:A7:FF:57:95:3B:6A:D1:F3:B3:89:17:A8:DB:D8:B2:43:F4:9F:99 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 5C36F840DF3EB90179BEC4369875D3CCE0B8F0B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 77 Signing time: Wed 17 Dec 2025 08:01:30 +0000 Manifest this update: Wed 17 Dec 2025 07:56:30 +0000 Manifest next update: Sat 20 Dec 2025 08:59:30 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: wQPS4K1JNiqySol5b2XBi17nAtC0h+LJgGzGmSKi6X4=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:36:f8:40:df:3e:b9:01:79:be:c4:36:98:75:d3:cc:e0:b8:f0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Dec 17 07:56:30 2025 GMT Not After : Dec 20 08:59:30 2025 GMT Subject: CN=66A7FF57953B6AD1F3B38917A8DBD8B243F49F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:29:fb:fa:0c:ea:4a:45:db:bd:18:a8:f0: df:a9:18:7d:89:d9:4d:43:12:6d:26:34:85:d9:f0: 22:8d:13:f7:c5:57:84:33:74:fc:c3:9e:c5:6a:d6: 6b:85:c9:d7:24:6d:b7:ca:f6:f8:a9:5b:5a:c9:33: 83:40:fa:bc:d4:4e:42:f3:60:d5:e8:e2:5a:d8:a9: ff:c2:f5:4a:f1:00:7b:1c:26:5f:01:ed:32:9b:b7: 43:80:26:09:79:cb:e3:01:56:c1:88:5a:eb:db:fa: e2:15:45:6f:11:22:da:54:e7:94:c6:95:cb:a6:83: f3:ec:68:f6:10:23:81:95:76:ea:ba:38:1b:74:c6: 10:24:e7:7b:32:d1:6c:cb:0a:f4:9e:43:2c:f5:1e: f0:92:6a:2c:b1:77:8e:6e:b2:65:e5:a7:87:65:60: 01:7d:af:b4:1d:78:47:c3:e9:a0:c4:cb:d7:64:f7: ac:90:89:54:51:38:80:53:14:36:bd:be:9d:82:a9: 4e:78:72:50:d4:7b:a0:1a:8a:61:42:41:77:48:78: 77:75:43:80:98:5c:5a:28:c1:a2:6b:7e:49:6f:35: 4a:29:a9:38:35:96:7b:09:f9:48:69:0e:41:4e:36: ae:aa:1e:ab:7e:28:0c:86:52:c3:91:3f:1f:9e:7f: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:FF:57:95:3B:6A:D1:F3:B3:89:17:A8:DB:D8:B2:43:F4:9F:99 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b9:06:d5:ff:7b:e9:73:83:01:3d:6c:d8:1e:7d:c8:4e:b8: ea:38:29:a3:76:60:e1:da:88:17:a7:07:34:3f:bb:32:97:55: 46:3e:06:e2:52:6f:f4:3e:98:30:24:d2:b6:a6:2f:51:9e:59: 0e:5d:29:10:dd:59:c0:d2:44:04:9e:38:3d:f1:ff:1c:f8:66: 91:7d:db:8a:22:a4:d5:c7:ba:67:19:41:7c:79:da:8a:ba:a6: 19:8f:70:9f:55:3a:b4:4c:b9:e3:5a:68:4d:87:d5:27:9d:4f: 4a:61:e5:9c:87:8e:bd:eb:20:d5:c5:b1:d3:e4:18:f6:65:06: e0:39:28:ed:48:90:48:27:2d:58:1c:b5:16:b0:c2:fe:38:d4: 46:3f:40:49:37:77:c7:b2:6e:54:88:95:1f:2d:99:15:bd:2f: 0f:55:cc:28:12:b1:8c:e8:de:9e:a7:50:d9:79:ab:61:f9:35: dd:69:fc:d2:05:a7:98:5f:68:dc:74:31:fe:ae:9f:c9:32:59: 4b:ab:55:dd:83:77:b8:79:b8:c9:fb:e7:54:49:3e:00:4c:a8: 2d:f0:55:60:76:5c:bc:a1:15:9f:ba:d7:2a:2b:6f:ef:f6:af: 1f:d6:21:54:83:04:3f:1c:a5:9b:9a:db:41:9a:68:40:9e:3a: 90:02:4c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDb4QN8+uQF5vsQ2mHXTzOC48LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTEyMTcwNzU2MzBaFw0yNTEyMjAwODU5MzBaMDMxMTAvBgNV BAMTKDY2QTdGRjU3OTUzQjZBRDFGM0IzODkxN0E4REJEOEIyNDNGNDlGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxin7+gzqSkXbvRio8N+pGH2J 2U1DEm0mNIXZ8CKNE/fFV4QzdPzDnsVq1muFydckbbfK9vipW1rJM4NA+rzUTkLz YNXo4lrYqf/C9UrxAHscJl8B7TKbt0OAJgl5y+MBVsGIWuvb+uIVRW8RItpU55TG lcumg/PsaPYQI4GVduq6OBt0xhAk53sy0WzLCvSeQyz1HvCSaiyxd45usmXlp4dl YAF9r7QdeEfD6aDEy9dk96yQiVRROIBTFDa9vp2CqU54clDUe6AaimFCQXdIeHd1 Q4CYXFoowaJrfklvNUopqTg1lnsJ+UhpDkFONq6qHqt+KAyGUsORPx+efwZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqf/V5U7atHzs4kXqNvYskP0n5kwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG5BtX/e+lzgwE9bNgefchOuOo4KaN2YOHa iBenBzQ/uzKXVUY+BuJSb/Q+mDAk0ramL1GeWQ5dKRDdWcDSRASeOD3x/xz4ZpF9 24oipNXHumcZQXx52oq6phmPcJ9VOrRMueNaaE2H1SedT0ph5ZyHjr3rINXFsdPk GPZlBuA5KO1IkEgnLVgctRawwv441EY/QEk3d8eyblSIlR8tmRW9Lw9VzCgSsYzo 3p6nUNl5q2H5Nd1p/NIFp5hfaNx0Mf6un8kyWUurVd2Dd7h5uMn751RJPgBMqC3w VWB2XLyhFZ+61yorb+/2rx/WIVSDBD8cpZua20GaaECeOpACTEM= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:19 2025 by rpki-client